Can I use external submit button without a callback page?
According to the Zuora documentation here, if I want to use external submit button, I have to implement a callback page (different from a js callback function). But I tried using submitEnabled: "true" to render the form and call Z.submit(). I still can successfully get the payment method ID (refId) using the js callback function. Can I do this in production? Is there any security concerns?